abdm-gateway.yaml

openapi: 3.0.0
info:
  version: "0.5"
  title: Gateway
  description: >
    Gateway is the hub that routes/orchestrates the interaction between consent managers and API bridges. There are 5 categories of APIs; discovery, link, consent flow, data flow and  monitoring. To reflect the consumers of APIs, the above apis are also categorized under cm facing, hiu facing and hip facing
servers:
  - url: https://dev.abdm.gov.in/gateway
    description: Sandbox
tags:
  - name: user auth
  - name: profile
  - name: discovery
  - name: link
  - name: consent flow
  - name: data flow
  - name: identification
  - name: monitoring
  - name: sessions
  - name: subscriptions
  - name: services
  - name: cm facing
  - name: hiu facing
  - name: hip facing
  - name: patient notification
paths:
  /v0.5/patients/profile/share:
    servers:
      - url: https://your-hrp-server.com
    post:
      tags:
        - profile
        - cm facing
      summary: Share patient profile details
      description: >
        Request for sharing patient's profile details to HIP

      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ShareProfileRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/ShareProfileRequest"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Invalid Request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
      deprecated: true
  /v1.0/patients/profile/share:
    servers:
      - url: https://your-hrp-server.com
    post:
      tags:
        - profile
      summary: Share patient profile details
      description: >
        Request for sharing patient's profile details to HIP

      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ShareProfileRequest1"
          application/xml:
            schema:
              $ref: "#/components/schemas/ShareProfileRequest1"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Invalid Request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/patients/profile/on-share:
    post:
      tags:
        - profile
      summary: Response to patient's share profile request
      description: >
        Result of patient share profile request at HIP end.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ShareProfileResult"
          application/xml:
            schema:
              $ref: "#/components/schemas/ShareProfileResult"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Format mismatch of any of attributes.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
      deprecated: true
  /v1.0/patients/profile/on-share:
    post:
      tags:
        - profile
      summary: Response to patient's share profile request
      description: >
        Result of patient share profile request at HIP end.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ShareProfileResult1"
          application/xml:
            schema:
              $ref: "#/components/schemas/ShareProfileResult1"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Format mismatch of any of attributes.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/care-contexts/discover:
    post:
      tags:
        - discovery
        - cm facing
      summary: Discover patient's accounts
      description: >
        Request for patient care context discover, made by CM for a specific HIP. It is expected that HIP will subsequently return either zero or one patient record with (potentially masked) associated care contexts
          1. **At least one of the verified identifier matches**
          2. **Name (fuzzy), gender matches**
          3. **If YoB was given, age band(+-2) matches**
          4. **If unverified identifiers were given, one of them matches**
          5. **If more than one patient records would be found after aforementioned steps, then patient who matches most verified and unverified identifiers would be returned.**
          6. **If there would be still more than one patients (after ranking) error would be returned**
          7. **Intended HIP should be able to resolve and identify results returned in the subsequent link confirmation request via the specified transactionId**
          8. **Intended HIP should store the discovery results with transactionId and care contexts discovered for subsequent link initiation**

      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientDiscoveryRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientDiscoveryRequest"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Empty verified identifiers.
              * Format mismatch of any of attributes.
                | type   | Format/Allowed Values|
                | ------- | ----------------    |
                | gender  | M/F/O/U |
                | MOBILE  | valid mobile number with proper country code |
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/care-contexts/on-discover:
    post:
      tags:
        - discovery
        - cm facing
      summary: Response to patient's account discovery request
      description: >
        Result of patient care-context discovery request at HIP end. If a matching patient found with zero or more care contexts associated, it is specified as result attribute. If the prior discovery request, resulted in errors then it is specified in the error attribute. Reasons of errors can be 
          1. **more than one definitive match for the given request** 
          2. **no verified identifer was specified**
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientDiscoveryResult"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientDiscoveryResult"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Format mismatch of any of attributes.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/link/init:
    post:
      tags:
        - link
        - cm facing
      summary: Link patient's care contexts
      description: >
        Request from CM to links care contexts associated with only one patient
          1. **Validate account reference number and care context reference number**
          2. **Validate transactionId in the request with discovery request entry to check whether there was a discovery
              and were these care contexts discovered or not for a given patient**
          3. **Before eventual link confirmation, HIP needs to authenticate the request with the patient(eg: OTP verification)**
          4. **HIP should communicate the mode of authentication of a successful request to Consent Manager**
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientLinkReferenceRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientLinkReferenceRequest"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Consent manager user id is not provided
              * Patient reference number is not provided
              * Care context references are not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/link/on-init:
    post:
      tags:
        - link
        - hip facing
      summary: Response to patient's care context link request
      description: >
        Result of patient care-context link request from HIP end. This happens in context of previous discovery of patient found at HIP end, therefore the link requests ought to be in reference to the patient reference and care-context references previously returned by the HIP. The correlation of discovery and link request is maintained through the transactionId. HIP should have
          1. **Validated transactionId in the request to check whether there was a discovery done previously, and the link request corresponds to returned patient care care context references**
          2. **Before returning the response, HIP should have sent an authentication request to the patient(eg: OTP verification)**
          3. **HIP should communicate the mode of authentication of a successful request**
          4. **HIP subsequently should expect the token passed via /link/confirm against the link.referenceNumber passed in this call**

        The error section in the body, represents the potential errors that may have occurred. Possible reasons:
          1. **Patient reference number is invalid**
          2. **Care context reference numbers are invalid**
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientLinkReferenceResult"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientLinkReferenceResult"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * Format mismatch of any of attributes.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/link/confirm:
    post:
      tags:
        - link
        - cm facing
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      summary: Token submission by Consent Manager for link confirmation
      description: >
        API to submit the token that was sent by HIP during the link request.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/LinkConfirmationRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/LinkConfirmationRequest"
      responses:
        "202":
          description: accepted
        "400":
          description: >
            **Causes:**
              * Token is not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/link/on-confirm:
    post:
      tags:
        - link
        - hip facing
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      summary: Token authenticated by HIP, indicating completion of linkage of care-contexts
      description: >
        Returns a list of linked care contexts with patient reference number.
          1. **Validated and linked account reference number**
          2. **Validated that the token sent from Consent Manager is same as the one generated by HIP**
          3. **Verified that same Consent Manager which made the link request is sending the token**
          4. **Results of unmasked linked care contexts with patient reference number**
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientLinkResult"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientLinkResult"
      responses:
        "202":
          description: accepted
        "400":
          description: >
            **Causes:**
              * resp not specified
              * atleast patient or error should be specified
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/link/add-contexts:
    post:
      tags:
        - link
        - hip facing
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      summary: API for HIP initiated care-context linking for patient
      description: >
        API to submit care-context to CM for HIP initiated linking. The API must accompany the "accessToken" fetched in the users/auth process.  
          1. subsequent usage for accessToken may be invalid if it was meant for one-time usage or if it expired
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientCareContextLinkRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientCareContextLinkRequest"
      responses:
        "202":
          description: accepted
        "400":
          description: >
            **Causes:**
              * required information not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/link/on-add-contexts:
    post:
      tags:
        - link
        - cm facing
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      summary: callback API for HIP initiated patient linking /link/add-context
      description: >
        If the accessToken is valid for purpose of linking, and specified details provided, CM will send "acknoweldgement.status" as SUCCESS. If any error occcurred, for example invalid token, or other required patient or care-context information not provided, then "error" attribute conveys so. 
          1. **accessToken must be valid and must be for the purpose of linking**
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientCareContextLinkResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientCareContextLinkResponse"
      responses:
        "202":
          description: accepted
        "400":
          description: >
            **Causes:**
              * resp not specified
              * atleast acknowledgement or error should be specified
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/context/notify:
    post:
      tags:
        - link
        - hip facing
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      summary: This API is meant to be called by HIPs when there is new health data generated for a patient, against a care context that is already linked to patient's ABDM account.
      description: >
        This API is called by HIP only when there is new health data is added/created for a patient and under a care context that is already linked with patient's Health Account. 
        HIP can send following things in this API to notify the Consent Manager about the new health data added:
          1. **Patient's Identifier for which the new health data is added (It can be ABDM id or ABDM number)**
          2. **Care Context reference under which the new health data is added**
          3. **Patient's reference (An identifier with which the patient is registered on HIP)**
          4. **Types of health information documents that have been added**
          5. **A date when the health information was created/added on the HIP**
        Note: This API shouldn't be called if the new heath data of is added/created under new care context.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HipDataNotificationRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/HipDataNotificationRequest"
      responses:
        "202":
          description: accepted
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/links/context/on-notify:
    post:
      tags:
        - link
        - cm facing
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      summary: Acknowledgement sent by Consent Manager to HIP for data notification.
      description: >
        CM sends back acknowledgement of receiving data notification by HIPs. CM may return errors if in following scenarios:
          1. **Patient id sent by HIP in the data notification is incorrect**
          2. **Carecontext sent by HIP in the data notification is not linked or incorrect.**
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HipDataNotificationAcknowledgement"
          application/xml:
            schema:
              $ref: "#/components/schemas/HipDataNotificationAcknowledgement"
      responses:
        "202":
          description: accepted
        "400":
          description: >
            **Causes:**
              * resp not specified
              * atleast acknowledgement or error should be specified
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/health-information/cm/request:
    post:
      tags:
        - data flow
        - hiu facing
      summary: Health information data request
      description: >
        Request for Health information against a consent id. CM would generate a transactionId against each consent and pass it as trnasaction context / correlation id to the HIP and also return the same to HIU via /on-request.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIRequest"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Bad request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Token is invalid or Link has expired
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/health-information/cm/on-request:
    post:
      tags:
        - data flow
        - cm facing
      summary: Health information data request
      description: >
        Callback API for acknowledgement of Health information request of HIU. CM calls this API when it has validated the Health Information request given the consent id. Either the **hiRequest** or **error** would need to be specified. If the health info request was valid, then the ***hiRequest.transactionId*** specifies the transaction context against which HIP would send over the data. 
        Possible cases of errors are
          1. **Invalid consent artefact id**
          2. **Consent has expired**
          3. **Date ranges are invalid**
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUHealthInformationRequestResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIUHealthInformationRequestResponse"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Bad request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Token is invalid or Link has expired
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consent-requests/init:
    post:
      tags:
        - consent flow
        - hiu facing
      summary: Create consent request
      description: Creates a consent request to get data about a patient by HIU user.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ConsentRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/ConsentRequest"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent 
              * Required attributes not mentioned
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consent-requests/on-init:
    post:
      tags:
        - consent flow
        - cm facing
      summary: Response to consent request
      description: |
        Result of consent request creation for a patient. **consentRequest.id** represents the consentrequest id created by CM. The result must contain either **consentRequest** or the **error** caused. <br/>
          Reasons for error may be
          * Invalid references (e.g patient id, hiu id), purpose, hiTypes, ranges, persmission
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ConsentRequestInitResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/ConsentRequestInitResponse"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consent-requests/status:
    post:
      tags:
        - consent flow
        - hiu facing
      summary: Get consent request status
      description: Get status of consent request done previously
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ConsentRequestStatusRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/ConsentRequestStatusRequest"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consent-requests/on-status:
    post:
      tags:
        - consent flow
        - cm facing
      summary: Result of consent request status
      description: |
        Result of consent request done previously. Status of request can be GRANTED,  DENIED, EXPIRED. If the request was GRANTED, then
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUConsentRequestStatus"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIUConsentRequestStatus"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consents/hip/notify:
    post:
      tags:
        - consent flow
        - cm facing
      summary: Consent notification
      description: >
        Notification of consents to health information providers consent request granted, consent revoked, consent expired. Only the GRANTED, REVOKED and EXPIRED status notifications will be sent to HIP.
          1. If consent is granted, status=GRANTED, then consentDetail contains the consent artefact details and signature is available. 
          2. If consent is revoked, then status=REVOKED, and consentId specifes which consent artefact is revoked. 
          3. If the consent has expired, then status=EXPIRED, and consentId specifies which consent artefact has expired. Note, this is also responsibility of the HIP to keep track of consent expiry. Any data request on expired consent artefact must not be done.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIPConsentNotification"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIPConsentNotification"
      responses:
        "202":
          description: Request Accepted
        "401":
          description: >
            **Causes:**
              * Invalid/Expired/Empty token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream services are down
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consents/hip/on-notify:
    post:
      tags:
        - consent flow
        - hip facing
      summary: Consent notification
      description: >
        This API is called by HIP as acknowledgement to notification of consents, in cases of consent revocation and expiration.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIPConsentNotificationResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIPConsentNotificationResponse"
      responses:
        "202":
          description: Request Accepted
        "401":
          description: >
            **Causes:**
              * Invalid/Expired/Empty token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream services are down
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consents/hiu/notify:
    post:
      tags:
        - consent flow
        - cm facing
      summary: Consent notification
      description: |
        Health information user will get notified about the consent request granted or denied, consent revoked, consent expired. 
        1. For consent request grant, status=GRANTED, consentRequestId=<consent-request-id>, and consentArtefacts is an array of generated consent artefact Ids.
        2. For consent request expiry, status=EXPIRED, consentRequestId=<consent-request-id>
        3. For consent request denied, status=DENIED, consentRequestId=<consent-request-id>
        4. For consent revocation, status=REVOKED, consentArtefacts is an array of revoked consent artefact ids
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUConsentNotificationEvent"
      responses:
        "202":
          description: Request Accepted.
        "401":
          description: >
            **Causes:**
              * Invalid/Expired/Empty token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream services are down
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consents/hiu/on-notify:
    post:
      tags:
        - consent flow
        - hiu facing
      summary: Consent notification
      description: |
        This API is called by HIU as acknowledgement to consent notifications, specifically for cases when consent is REVOKED or EXPIRED.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUConsentNotificationResponse"
      responses:
        "202":
          description: Request Accepted.
        "401":
          description: >
            **Causes:**
              * Invalid/Expired/Empty token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream services are down
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consents/fetch:
    post:
      tags:
        - consent flow
        - hiu facing
      summary: Get consent artefact
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ConsentFetchRequest"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/consents/on-fetch:
    post:
      tags:
        - consent flow
        - cm facing
      summary: Result of fetch request for a consent artefact
      description: |
        Must contain either consentDetail or error. Possible reason of errors are 
        1. consentId passed through /fetch is invalid
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/ConsentArtefactResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/ConsentArtefactResponse"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/health-information/notify:
    post:
      tags:
        - data flow
        - hip facing
        - hiu facing
      summary: Notifications corresponding to events during data flow
      description: |
        API called by HIU and HIP during data-transfer. 
        1. HIP on transfer of data would send **sessionStatus** - one of [TRANSFERRED, FAILED]
        2. HIP would also send **hiStatus** for each *careContextReference* - on of [DELIVERED, ERRORED]
        3. HIU on receipt of data would send **sessionStatus** - one of [TRANSFERRED, FAILED]. For example, FAILED when if data was not sent or if invalid data was sent
        4. HIU would also send **hiStatus** for each *careContextReference* - one of [OK, ERRORED]
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HealthInformationNotification"
          application/xml:
            schema:
              $ref: "#/components/schemas/HealthInformationNotification"
      responses:
        "204":
          description: Notification is Accepted
        "400":
          description: >
            **Causes:**
              * Invalid Request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/heartbeat:
    get:
      tags:
        - monitoring
      summary: Informs about server status
      responses:
        "200":
          description: OK
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/HeartbeatResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/HeartbeatResponse"
  /v0.5/sessions:
    post:
      tags:
        - sessions
      summary: Get access token
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/SessionRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/SessionRequest"
      responses:
        "200":
          description: OK
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/SessionResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/SessionResponse"
        "404":
          description: >
            **Causes:**
              * Invalid consent request id
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Invalid client Id or secret.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/health-information/hip/request:
    post:
      tags:
        - data flow
        - cm facing
      summary: Health information data request
      description: >
        API called by CM to request Health information from HIP against a validated consent artefact. The transactionId is the correlation id that HIP should use use when pushing data to the **dataPushUrl**.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIPHIRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIPHIRequest"
      responses:
        "202":
          description: Request accepted.
        "400":
          description: >
            **Causes:**
              * Bad request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Token is invalid or Link has expired
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/health-information/hip/on-request:
    post:
      tags:
        - data flow
        - hip facing
      summary: Health information data request
      description: >
        API called by HIP to acknowledge Health information request receipt. Either the **hiRequest** or **error** must be specified. **hiRequest** element returns the same transactionId as before with a status indicating that the request is acknowledged.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIPHealthInformationRequestAcknowledgement"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIPHealthInformationRequestAcknowledgement"
      responses:
        "202":
          description: Request accepted.
        "400":
          description: >
            **Causes:**
              * Bad request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Token is invalid or Link has expired
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/.well-known/openid-configuration:
    get:
      tags:
        - sessions
      summary: Get openid configuration
      responses:
        "200":
          description: OK
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/OpenIdConfiguration"
            application/xml:
              schema:
                $ref: "#/components/schemas/OpenIdConfiguration"
        "404":
          description: >
            **Causes:**
              * Invalid consent request id
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/certs:
    get:
      tags:
        - sessions
      summary: Get certs for JWT verification
      responses:
        "200":
          description: OK
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/Certs"
            application/xml:
              schema:
                $ref: "#/components/schemas/Certs"
        "404":
          description: >
            **Causes:**
              * Invalid consent request id
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/patients/find:
    post:
      tags:
        - identification
        - hiu facing
      summary: Identify a patient by her consent-manager user-id
      description: >
        This API is meant for identify to patient given her consent-manager-user-id
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientIdentificationRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientIdentificationRequest"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            Invalid request, required attributes not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/patients/on-find:
    post:
      tags:
        - identification
        - cm facing
      summary: Identification result for a consent-manager user-id
      description: |
        If a patient is found then patient.name contains the patients name. 
        Otherwise, patient is not provided, and possibly error is raised for invalid requests
        Note in addition to the "Authorization" header, one of the following headers must be specified
        1. specify **X-HIU-ID** if the requester is HIU (identified from /find requester.id)
        2. specify **X-HIP-ID** if the requester is HIP (identified from /find requester.id)
      parameters:
        - $ref: "#/components/parameters/authorization"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientIdentificationResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientIdentificationResponse"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            Invalid request, required attributes not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/users/auth/fetch-modes:
    post:
      tags:
        - user auth
        - hip facing
        - hiu facing
      summary: Get a patient's authentication modes relevant to specified purpose
      description: >
        This API is meant for identify supported authentication modes for a patient given a specific purpose
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthModeQueryRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthModeQueryRequest"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            Invalid request, required attributes not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/users/auth/on-fetch-modes:
    post:
      tags:
        - user auth
        - cm facing
      summary: Identification result for a consent-manager user-id
      description: |
        If a patient is found then **auth** attribute contains the supported modes for the specified purpose. 
        Otherwise, error is raised for invalid requests or for non-existent id.
        Note in addition to the "Authorization" header, one of the following headers must be specified
        1. **X-HIU-ID** if the requester is HIU (identified from /auth/fetch-modes requester.id)
        2. **X-HIP-ID** if the requester is HIP (identified from /auth/fetch-modes requester.id)
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthModeQueryResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthModeQueryResponse"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            Invalid request, required attributes not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/users/auth/init:
    post:
      tags:
        - user auth
        - hip facing
        - hiu facing
      summary: Initialize authentication from HIP
      description: >
        This API is called by HIPs to initiate authentication of users. A transactionId is retuned by the corresponding callback API for confirmation of user auth.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthInitRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthInitRequest"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * patient id is not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/users/auth/on-init:
    post:
      tags:
        - user auth
        - cm facing
      summary: Response to user authentication initialization from HIP
      description: >
        If the patient's id is valid, CM will return a transactionId as initialization of user auth. If the request is valid, then 'auth.mode' will convey how the authentication should be done. The authentication can be *mediated* or *direct*. For mediated authentication modes, HIP or HIU is epected to send over relevant code (OTP/token) or demographic info via subsequent API call to /auth/confirm. for direct authentication case, CM will notify requester through/users/auth/notify API. 

          1. **auth.mode** conveys whats the mode of authentication is, and what is expected from HIP/HIU in the subsequent /auth/confirm API call. Possible values 
              1. MOBILE_OTP - auth via OTP to registered mobile. Mediated. 
              2. AADHAAR_OTP - auth initiated with Aadhaar with OTP. Mediated. 
              3. DEMOGRAPHICS - auth initiated with demographic verification
              4. DIRECT - for authentication directly with the patient. e.g. Mobile App, SMS. In this case, the HIP/HIU is not expected to call subsequent /auth/confirm call. CM will do direct authentication with the User (e.g. Mobile App, SMS etc) and will notify requester
          2. **meta.expiry** conveys the expiry time of the token and the authentication session
          3. **NOTE**, only one of **X-HIP-ID** or **X-HIU-ID** will be sent as part of header, not both. 

        The error section in the body, represents the potential errors that may have occurred. Possible reasons:
          1. Patient id is invalid
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthInitResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthInitResponse"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * required information not provided
              * neither authInit nor error specified
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/users/auth/confirm:
    post:
      tags:
        - user auth
        - hip facing
        - hiu facing
      summary: Confirmation request sending token, otp or other authentication details from HIP/HIU for confirmation
      description: >
        This API is called by HIP/HIUs to confirm authentication of users. The transactionId returned by the previous callback API /users/auth/on-init must be sent. If Authentication is successful the callback API will send an "access token" for subsequent purpose specific API calls. Note only **credential.authCode** or **credential.demographic** should be sent
          1. demographic details are only required for  demographic auth as of now. 
          2. demographic details are required only in MEDIATED cases and if the **auth.mode** so demands. e.g. if **auth.mode** is DEMOGRAPHICS. Usually for demographic authentication, the name, gender and DOB must be exactly as specified in User Account.
          3. demographic.identifier is optional, however maybe required if authentication so mandates. 
          4. credential.authCode is required for other MEDIATED authentication like MOBILE_OTP, AADHAAR_OTP.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthConfirmRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthConfirmRequest"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * transaction id is not provided or invalid
              * token or other auth confirmation details not provided or invalid
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/users/auth/on-confirm:
    post:
      tags:
        - user auth
        - cm facing
      summary: callback API for /auth/confirm (in case of MEDIATED auth) to confirm user authentication or not
      description: >
        This API is called by CM to confirm authentication of users.

          1. **auth.accessToken** - is specific to the purpose mentioned in the /auth/init. This token needs to be used for initiating the intended action. For example for HIP initiated linking of care-contexts
          2. **NOTE**, only one of **X-HIP-ID** or **X-HIU-ID** will be sent as part of header, not both.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthConfirmResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthConfirmResponse"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * required details not provided
              * neither auth nor error specified
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/users/auth/notify:
    post:
      tags:
        - user auth
        - cm facing
      summary: notification API in case of DIRECT mode of authentication by the CM
      description: >
        This API is called by CM to confirm authentication of users. The transactionId returned is same as that passed in /auth/on-init. The "auth.status" conveys whether the request was GRANTED or DENIED.

          1. **auth.accessToken** - is specific to the purpose mentioned in the /auth/init. This token needs to be used for initiating the intended action. For example for HIP initiated linking of care-contexts
          2. **NOTE**, only one of **X-HIP-ID** or **X-HIU-ID** will be sent as part of header, not both.
          3. The payload is conditional to the purpose of auth. If purpose specified in /auth/init is KYC or KYC_AND_LINK, then patient details are passed. **auth.accessToken** is passed only if the purpose is LINK or KYC_AND_LINK.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthNotification"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthNotification"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * required details not provided
              * neither auth nor error specified
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/users/auth/on-notify:
    post:
      tags:
        - user auth
        - hip facing
        - hiu facing
      summary: callback API by HIU/HIPs as acknowledgement of auth notification
      description: >
        This API is called by HIU/HIPs to confirm acknowledgement for receipt of auth notification is case of DIRECT authentication.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientAuthNotificationAcknowledgement"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientAuthNotificationAcknowledgement"
      responses:
        "202":
          description: Request accepted
        "400":
          description: >
            **Causes:**
              * required details not provided
              * neither auth nor error specified
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/hi-services/{service-id}:
    get:
      tags:
        - services
      summary: Get bridge service details/profile by the serviceId provided.
      description: >
        This API is meant for displaying the bridge service details by the serviceId provided .
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/service-id"
      responses:
        "200":
          description: service details fetched successfully
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ServiceProfileResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ServiceProfileResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "404":
          description: Service doesn't exist.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/subscription-requests/cm/init:
    post:
      tags:
        - subscriptions
        - hiu facing
      summary: Request for subscription
      description: creates a request for subscription. The subscription categories can be for care-contexts linkages or availability of data against existing care-contexts. Note that the requester must have HIU role
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/SubscriptionRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/SubscriptionRequest"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent 
              * Required attributes not mentioned
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/subscription-requests/cm/on-init:
    post:
      tags:
        - subscriptions
        - cm facing
      summary: callback API for the /subscription-requests/cm/init to notify a HIU on acceptance/acknowledgement of the request for subscription.
      description: |
        This callback API acknowledges the request for subscription from a HIU, and sends back a "id" that will be used when the patient/user approves or denies the subscription.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUSubscriptionRequestReceipt"
      responses:
        "202":
          description: Request Accepted.
        "401":
          description: >
            **Causes:**
              * Invalid/Expired/Empty token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream services are down
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/subscription-requests/hiu/notify:
    post:
      tags:
        - subscriptions
        - cm facing
      summary: Notification for subscription grant/deny/revoke
      description: |
        This API is used by CM to notify a HIU to grant or deny a request for subscription, and also to notify that in case an existing subscription is revoked or expired. For notifying that a particular subscription request was GRANTED or DENIED, the **subscriptionRequestId** is passed.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/SubscriptionApprovalNotification"
          application/xml:
            schema:
              $ref: "#/components/schemas/SubscriptionApprovalNotification"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent 
              * Required attributes not mentioned
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/subscription-requests/hiu/on-notify:
    post:
      tags:
        - subscriptions
        - hiu facing
      summary: Callback API for /subscription-requests/hiu/notify to acknowledge receipt of notification.
      description: |
        This API is called by HIU as acknowledgement to subscription request relevant notifications.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUSubscriptionRequestNotificationAcknowledgement"
      responses:
        "202":
          description: Request Accepted.
        "401":
          description: >
            **Causes:**
              * Invalid/Expired/Empty token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream services are down
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/subscriptions/hiu/notify:
    post:
      tags:
        - subscriptions
        - cm facing
      summary: Notification to HIU on basis of a granted subscription
      description: |
        This API is used by CM to notify a HIU for notification relevant to subscription. Notifications are sent to subscribed HIUs whenever a new care-context is linked or new data is available on an existing linked care-context. 
        1. if event.category = LINK, then only care-contexts are passed when new care-contexts are linked for patient. 
        2. If event.category = DATA, then hiTypes are passed. Care-context is passed only if the subscribed HIU has any valid consent for that care-context

      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUSubscriptionNotification"
          application/xml:
            schema:
              $ref: "#/components/schemas/HIUSubscriptionNotification"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            **Causes:**
              * Invalid data sent 
              * Required attributes not mentioned
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Expired/Invalid token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
  /v0.5/subscriptions/hiu/on-notify:
    post:
      tags:
        - subscriptions
        - hiu facing
      summary: Callback API for /subscriptions/hiu/notify to acknowledge receipt of notification.
      description: |
        This API is called by HIU as acknowledgement to consent notifications, specifically for cases when consent is REVOKED or EXPIRED.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/HIUSubscriptionNotificationAcknowledgment"
      responses:
        "202":
          description: Request Accepted.
        "401":
          description: >
            **Causes:**
              * Invalid/Expired/Empty token.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream services are down
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/patients/sms/notify:
    post:
      tags:
        - hip facing
        - patient notification
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      summary: API for HIP to send SMS notifications to patients
      description: >
        API to send SMS notifications to patient with custom deeplink.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientSMSNotifcationRequest"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientSMSNotifcationRequest"
      responses:
        "202":
          description: accepted
        "400":
          description: >
            **Causes:**
              * required information not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
      deprecated: true

  /v0.5/patients/sms/on-notify:
    post:
      tags:
        - cm facing
        - patient notification
      summary: Acknowledgment response for SMS notification sent to patient by HIP
      description: |
        If the SMS notification is successfully sent to patient then "status" will be "ACKNOWLEDGED" with no error.
        If the SMS notification is failed then "status" will be "ERRORED" with error.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientSMSNotifcationResponse"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientSMSNotifcationResponse"
      responses:
        "202":
          description: Request Accepted
        "400":
          description: >
            Invalid request, required attributes not provided
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "401":
          description: >
            **Causes:**
              * Unauthorized request
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/patients/status/on-notify:
    post:
      tags:
        - hiu facing
        - hip facing
        - patient notification
      summary: Acknowledgment by HIP/HIU
      description: |
        This API is to be called by HIU/HIP bridge after receiving patient status (Activation/Reactivation/Deletion).
        In case of successfully receiving the notification "status" should sent as "OK" with no error.
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-CM-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/GatewayPatientStatusNotification"
          application/xml:
            schema:
              $ref: "#/components/schemas/GatewayPatientStatusNotification"
      responses:
        "202":
          description: Request Accepted
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

  /v0.5/patients/status/notify:
    post:
      tags:
        - cm facing
        - patient notification
      summary: Notification sent by Consent MAnager
      description: |
        Status (ACTIVE/DEACTIVATED/DELETED) will be sent to HIP.
        Note in addition to the "Authorization" header, one of the following headers must be specified
        1. **X-HIU-ID** if the requester is HIU .
        2. **X-HIP-ID** if the requester is HIP .
      parameters:
        - $ref: "#/components/parameters/authorization"
        - $ref: "#/components/parameters/X-HIP-ID"
        - $ref: "#/components/parameters/X-HIU-ID"
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: "#/components/schemas/PatientStatusNotification"
          application/xml:
            schema:
              $ref: "#/components/schemas/PatientStatusNotification"
      responses:
        "202":
          description: Request Accepted
        "500":
          description: >
            **Causes:**
              * Downstream system(s) is down.
              * Unhandled exceptions.
          content:
            application/json:
              schema:
                $ref: "#/components/schemas/ErrorResponse"
            application/xml:
              schema:
                $ref: "#/components/schemas/ErrorResponse"

components:
  parameters:
    authorization:
      name: Authorization
      in: header
      required: true
      description: Access token which was issued after successful login with gateway auth server.
      schema:
        type: string
    X-HIP-ID:
      name: X-HIP-ID
      in: header
      required: true
      description: Identifier of the health information provider to which the request was intended.
      schema:
        type: string
    X-HIU-ID:
      name: X-HIU-ID
      in: header
      required: true
      description: Identifier of the health information user to which the request was intended.
      schema:
        type: string
    X-CM-ID:
      name: X-CM-ID
      in: header
      required: true
      description: Suffix of the consent manager to which the request was intended.
      schema:
        type: string
    LinkRefNumber:
      name: linkRefNumber
      in: path
      required: true
      description: Reference number for the link request made earlier.
      schema:
        $ref: "#/components/schemas/UuidSchema"
    ConsentRequestId:
      name: consentRequestId
      in: path
      required: true
      description: Consent request's identifier
      schema:
        type: string
        format: uuid
    ConsentId:
      name: consentId
      in: path
      required: true
      description: Consent request's identifier
      schema:
        type: string
        format: uuid
    service-id:
      name: service-id
      in: path
      required: true
      schema:
        type: string
  schemas:
    TimestampSchema:
      type: string
      format: date-time
      description: Date time format in UTC, includes miliseconds YYYY-MM-DDThh:mm:ss.vZ
    UuidSchema:
      type: string
      format: uuid
      example: a1s2c932-2f70-3ds3-a3b5-2sfd46b12a18d
    PatientDiscoveryRequest:
      type: object
      required:
        - requestId
        - timestamp
        - transactionId
        - patient
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request.
          example: "499a5a4a-7dda-4f20-9b67-e24589627061"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        transactionId:
          type: string
          format: uuid
          description: correlation-Id for patient discovery and subsequent care context linkage
        patient:
          type: object
          required:
            - id
            - verifiedIdentifiers
            - name
            - gender
            - yearOfBirth
          properties:
            id:
              type: string
              example: <patient-id>@<consent-manager-id>
              description: Identifier of patient at consent manager
            verifiedIdentifiers:
              type: array
              items:
                $ref: "#/components/schemas/Identifier"
              xml:
                name: verifiedIdentifiers
                wrapped: true
            unverifiedIdentifiers:
              type: array
              items:
                $ref: "#/components/schemas/Identifier"
              xml:
                name: unverifiedIdentifiers
                wrapped: true
            name:
              type: string
              example: "chandler bing"
            gender:
              $ref: "#/components/schemas/PatientGender"
            yearOfBirth:
              type: integer
              example: 2000
      xml:
        name: PatientDiscoveryRequest
    PatientGender:
      type: string
      enum: [M, F, O, U]
    PatientDiscoveryResult:
      type: object
      required:
        - requestId
        - transactionId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        transactionId:
          type: string
          format: uuid
        patient:
          $ref: "#/components/schemas/PatientRepresentation"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
      xml:
        name: PatientDiscoveryResult
    ErrorResponse:
      type: object
      properties:
        error:
          $ref: "#/components/schemas/Error"
      xml:
        name: ErrorResponse
    Identifier:
      type: object
      properties:
        type:
          $ref: "#/components/schemas/IdentifierType"
        value:
          type: string
          example: "+919800083232"
      xml:
        name: Identifier
    IdentifierType:
      type: string
      enum: [MR, MOBILE, NDHM_HEALTH_NUMBER, HEALTH_ID]
    PatientRepresentation:
      type: object
      required:
        - referenceNumber
        - display
      properties:
        referenceNumber:
          type: string
        display:
          type: string
        careContexts:
          type: array
          items:
            $ref: "#/components/schemas/CareContextRepresentation"
        matchedBy:
          type: array
          items:
            $ref: "#/components/schemas/IdentifierType"
      xml:
        name: Patient
    CareContext:
      type: object
      required:
        - referenceNumber
      properties:
        referenceNumber:
          type: string
      xml:
        name: Tag
    CareContextRepresentation:
      type: object
      required:
        - referenceNumber
        - display
      properties:
        referenceNumber:
          type: string
        display:
          type: string
      xml:
        name: Tag
    PatientLinkReferenceRequest:
      type: object
      required:
        - requestId
        - timestamp
        - transactionId
        - patient
      properties:
        requestId:
          type: string
          format: uuid
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        transactionId:
          type: string
          format: uuid
        patient:
          type: object
          required:
            - id
            - referenceNumber
            - careContexts
          properties:
            id:
              type: string
              example: hinapatel79@ndhm
              description: Identifier of patient at consent manager
            referenceNumber:
              type: string
              example: TMH-PUID-001
            careContexts:
              type: array
              items:
                $ref: "#/components/schemas/CareContext"
              xml:
                name: careContexts
                wrapped: true
      xml:
        name: PatientLinkReferenceRequest

    LinkConfirmationRequest:
      type: object
      required:
        - requestId
        - timestamp
        - confirmation
      properties:
        requestId:
          type: string
          format: uuid
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        confirmation:
          type: object
          required:
            - linkRefNumber
            - token
          properties:
            linkRefNumber:
              type: string
            token:
              type: string
    PatientLinkReferenceResult:
      type: object
      required:
        - requestId
        - timestamp
        - transactionId
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        transactionId:
          $ref: "#/components/schemas/UuidSchema"
        link:
          type: object
          required:
            - referenceNumber
            - authenticationType
          properties:
            referenceNumber:
              type: string
            authenticationType:
              type: string
              enum: ["DIRECT", "MEDIATED"]
            meta:
              $ref: "#/components/schemas/Meta"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    Meta:
      type: object
      required:
        - mode
        - value
      properties:
        communicationMedium:
          type: string
          enum: ["MOBILE", "EMAIL"]
        communicationHint:
          type: string
        communicationExpiry:
          type: string
          example: "2019-12-30T12:01:55Z"
      xml:
        name: Meta
    Error:
      type: object
      properties:
        code:
          type: integer
          enum: [1000, 10001]
        message:
          type: string
      xml:
        name: Error
    PatientLinkResult:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        patient:
          type: object
          required:
            - referenceNumber
            - display
            - careContexts
          properties:
            referenceNumber:
              type: string
            display:
              type: string
            careContexts:
              type: array
              items:
                $ref: "#/components/schemas/CareContextRepresentation"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    HIRequest:
      type: object
      required:
        - requestId
        - timestamp
        - hiRequest
      properties:
        requestId:
          $ref: "#/components/schemas/UuidSchema"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        hiRequest:
          type: object
          required:
            - consent
            - dataPushUrl
            - keyMaterial
            - dateRange
          properties:
            consent:
              $ref: "#/components/schemas/consent"
            dateRange:
              $ref: "#/components/schemas/dateRange"
            dataPushUrl:
              type: string
            keyMaterial:
              $ref: "#/components/schemas/keyMaterial"
    consent:
      type: object
      required:
        - id
      properties:
        id:
          type: string
    dateRange:
      type: object
      required:
        - from
        - to
      properties:
        from:
          type: string
          format: date-time
        to:
          type: string
          format: date-time
    HIPConsentNotification:
      type: object
      required:
        - requestId
        - timestamp
        - notification
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        notification:
          type: object
          required:
            - status
            - consentId
            - consentDetail
            - signature
          properties:
            status:
              $ref: "#/components/schemas/ConsentStatus"
            consentId:
              type: string
              format: uuid
            consentDetail:
              type: object
              required:
                - consentId
                - createdAt
                - patient
                - careContexts
                - purpose
                - hip
                - hiTypes
                - permission
                - consentManager
              properties:
                schemaVersion:
                  type: string
                  format: string
                consentId:
                  type: string
                  format: uuid
                createdAt:
                  type: string
                  format: date-time
                patient:
                  $ref: "#/components/schemas/ConsentManagerPatientID"
                careContexts:
                  type: array
                  items:
                    type: object
                    required:
                      - patientReference
                      - careContextReference
                    properties:
                      patientReference:
                        type: string
                        example: hinapatel79@hospital
                      careContextReference:
                        type: string
                        example: Episode1
                purpose:
                  $ref: "#/components/schemas/UsePurpose"
                hip:
                  type: object
                  allOf:
                    - $ref: "#/components/schemas/OrganizationRepresentation"
                    - xml:
                        name: hip
                consentManager:
                  type: object
                  allOf:
                    - $ref: "#/components/schemas/OrganizationReference"
                    - xml:
                        name: consentManager
                hiTypes:
                  type: array
                  items:
                    $ref: "#/components/schemas/HITypeEnum"
                permission:
                  $ref: "#/components/schemas/Permission"
            signature:
              type: string
              example: Signature of CM as defined in W3C standards; Base64 encoded
    HITypeEnum:
      type: string
      enum:
        - OPConsultation
        - Prescription
        - DischargeSummary
        - DiagnosticReport
        - ImmunizationRecord
        - HealthDocumentRecord
        - WellnessRecord
      xml:
        name: HIType
    ConsentStatus:
      type: string
      enum:
        - GRANTED
        - EXPIRED
        - DENIED
        - REQUESTED
        - REVOKED
    ConsentManagerPatientID:
      type: object
      properties:
        id:
          type: string
          xml:
            attribute: true
          format: <user-id>@ndhm
          example: hinapatel79@ndhm
    UsePurpose:
      type: object
      required:
        - text
        - code
      properties:
        text:
          type: string
        code:
          type: string
          description: From the fixed set, documented at refUri
        refUri:
          type: string
          format: uri
    Permission:
      type: object
      required:
        - accessMode
        - dateRange
        - dataEraseAt
        - frequency
      properties:
        accessMode:
          type: string
          enum: [VIEW, STORE, QUERY, STREAM]
        dateRange:
          type: object
          properties:
            from:
              type: string
              format: date-time
            to:
              type: string
              format: date-time
        dataEraseAt:
          type: string
          format: date-time
        frequency:
          type: object
          properties:
            unit:
              type: string
              enum: [HOUR, WEEK, DAY, MONTH, YEAR]
            value:
              type: integer
            repeats:
              type: integer
      xml:
        name: Permission
    OrganizationRepresentation:
      type: object
      required:
        - id
      properties:
        id:
          type: string
          xml:
            attribute: true
      xml:
        name: OrganizationResponse
    OrganizationReference:
      type: object
      required:
        - id
      properties:
        id:
          type: string
          xml:
            attribute: true
      xml:
        name: OrganizationReference
    keyMaterial:
      type: object
      required:
        - cryptoAlg
        - curve
        - dhPublicKey
        - nonce
      properties:
        cryptoAlg:
          type: string
          format: string
          example: ECDH
        curve:
          type: string
          format: string
          example: Curve25519
        dhPublicKey:
          $ref: "#/components/schemas/keyObject"
        nonce:
          type: string
          format: 32 byte string
          example: 3fa85f64-5717-4562-b3fc-2c963f66afa6
    keyObject:
      type: object
      required:
        - expiry
        - parameters
        - keyValue
      properties:
        expiry:
          type: string
          format: date-time
        parameters:
          type: string
          format: string
          example: Curve25519/32byte random key
        keyValue:
          type: string
          format: string
    ConsentRequest:
      type: object
      required:
        - requestId
        - timestamp
        - consent
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request.
          example: "499a5a4a-7dda-4f20-9b67-e24589627061"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        consent:
          type: object
          required:
            - purpose
            - patient
            - hiu
            - requester
            - hiTypes
            - permission
            - consentNotificationUrl
          properties:
            purpose:
              $ref: "#/components/schemas/UsePurpose"
            patient:
              type: object
              allOf:
                - $ref: "#/components/schemas/ConsentManagerPatientID"
                - xml:
                    name: patient
            hip:
              type: object
              allOf:
                - $ref: "#/components/schemas/OrganizationRepresentation"
                - xml:
                    name: hip
            careContexts:
              type: array
              items:
                $ref: "#/components/schemas/CareContextDefinition"
            hiu:
              type: object
              allOf:
                - $ref: "#/components/schemas/OrganizationRepresentation"
                - xml:
                    name: hiu
            requester:
              $ref: "#/components/schemas/Requester"
            hiTypes:
              type: array
              items:
                $ref: "#/components/schemas/HITypeEnum"
            permission:
              $ref: "#/components/schemas/Permission"
    Requester:
      type: object
      required:
        - name
      properties:
        name:
          type: string
          example: Dr. Manju
        identifier:
          type: object
          properties:
            type:
              type: string
              example: REGNO
            value:
              type: string
              example: "MH1001"
            system:
              type: string
              example: https://www.mciindia.org
    HealthInformationNotification:
      type: object
      required:
        - requestId
        - timestamp
        - notification
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request.
          example: "499a5a4a-7dda-4f20-9b67-e24589627061"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        notification:
          type: object
          required:
            - consentId
            - transactionId
            - doneAt
            - notifier
            - statusNotification
          properties:
            consentId:
              $ref: "#/components/schemas/UuidSchema"
            transactionId:
              $ref: "#/components/schemas/UuidSchema"
            doneAt:
              type: string
              format: date-time
            notifier:
              type: object
              required:
                - type
                - id
              properties:
                type:
                  type: string
                  enum: [HIU, HIP]
                id:
                  type: string
                  example: tmh
            statusNotification:
              type: object
              required:
                - sessionStatus
                - hipId
              properties:
                sessionStatus:
                  type: string
                  enum: [TRANSFERRED, FAILED]
                hipId:
                  type: string
                  example: max
                statusResponses:
                  type: array
                  items:
                    type: object
                    required:
                      - careContextReference
                      - hiStatus
                    properties:
                      careContextReference:
                        type: string
                      hiStatus:
                        type: string
                        enum: [DELIVERED, OK, ERRORED]
                        example: OK
                      description:
                        type: string
    ConsentArtefactReference:
      type: object
      required:
        - id
      properties:
        id:
          type: string
          example: "<consent-artefact-id>"
    HIUConsentNotificationEvent:
      type: object
      required:
        - requestId
        - timestamp
        - notification
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        notification:
          type: object
          required:
            - status
            - consentRequestId
          properties:
            consentRequestId:
              type: string
              example: "<consent-request-id>"
            status:
              $ref: "#/components/schemas/ConsentStatus"
            consentArtefacts:
              type: array
              items:
                $ref: "#/components/schemas/ConsentArtefactReference"
              description: if the status is GRANTED or REVOKED, then the consentArtefact references (Ids) must be specified.
    HeartbeatResponse:
      type: object
      properties:
        timestamp:
          type: string
          format: date-time
          xml:
            attribute: true
        status:
          type: string
          enum:
            - UP
            - DOWN
        error:
          $ref: "#/components/schemas/Error"
      xml:
        name: HeartbeatResponse
    SessionRequest:
      type: object
      required:
        - clientId
        - clientSecret
        - grantType
      properties:
        clientId:
          type: string
        clientSecret:
          type: string
        grantType:
          type: string
          enum: [client_credentials, refresh_token]
        refreshToken:
          type: string
    SessionResponse:
      type: object
      properties:
        accessToken:
          type: string
          example: eyJhbGciOiJSUzI1Ni.IsInR5cCIgOiAiSldUIiwia2lkIiA6ICJrVVp.2MXJQMjRyYXN1UW9wU2lWbkdZQUZIVFowYVZGVWpYNXFLMnNibTk0In0
        expiresIn:
          type: integer
          example: 1800
          description: In Minutes
        refreshExpiresIn:
          type: integer
          example: 1800
          description: In Minutes
        refreshToken:
          type: string
          example: eyJhbGciOiJSUzI1Ni.IsInR5cCIgOiAiSldUIiwia2lkIiA6ICJrVVp.2MXJQMjRyYXN1UW9wU2lWbkdZQUZIVFowYVZGVWpYNXFLMnNibTk0In0
        tokenType:
          type: string
          example: bearer
    OpenIdConfiguration:
      type: object
      properties:
        jwks_uri:
          type: string
          format: uri
          example: "https://abdm-gateway/certs"
    Certs:
      type: object
      properties:
        keys:
          type: array
          items:
            $ref: "#/components/schemas/CertificateOrKeyGetSchema"
    CertificateOrKeyGetSchema:
      type: object
      properties:
        e:
          type: string
        kid:
          type: string
        kty:
          type: string
        n:
          type: string
        use:
          type: string
        x5c:
          type: array
          items:
            description: A PKIX certificate [RFC5280]
            type: string
        x5t:
          type: string
        x5t#S256:
          type: string
        alg:
          type: string
    ConsentArtefactResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        consent:
          type: object
          required:
            - status
            - consentDetail
            - signature
          properties:
            status:
              $ref: "#/components/schemas/ConsentStatus"
            consentDetail:
              type: object
              required:
                - consentId
                - createdAt
                - patient
                - careContexts
                - purpose
                - hip
                - hiu
                - consentManager
                - hiTypes
                - permission
              properties:
                schemaVersion:
                  type: string
                  format: string
                consentId:
                  type: string
                  format: uuid
                createdAt:
                  type: string
                  format: date-time
                patient:
                  $ref: "#/components/schemas/ConsentManagerPatientID"
                careContexts:
                  type: array
                  items:
                    type: object
                    required:
                      - patientReference
                      - careContextReference
                    properties:
                      patientReference:
                        type: string
                        example: hinapatel79@hospital
                      careContextReference:
                        type: string
                        example: Episode1
                purpose:
                  $ref: "#/components/schemas/UsePurpose"
                hip:
                  type: object
                  allOf:
                    - $ref: "#/components/schemas/OrganizationRepresentation"
                    - xml:
                        name: hip
                hiu:
                  type: object
                  allOf:
                    - $ref: "#/components/schemas/OrganizationRepresentation"
                    - xml:
                        name: hiu
                consentManager:
                  type: object
                  allOf:
                    - $ref: "#/components/schemas/OrganizationRepresentation"
                    - xml:
                        name: consentManager
                requester:
                  $ref: "#/components/schemas/Requester"
                hiTypes:
                  type: array
                  items:
                    $ref: "#/components/schemas/HITypeEnum"
                permission:
                  $ref: "#/components/schemas/Permission"
            signature:
              type: string
              example: Signature of CM as defined in W3C standards; Base64 encoded
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    HIUHealthInformationRequestResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          $ref: "#/components/schemas/UuidSchema"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        hiRequest:
          type: object
          required:
            - transactionId
            - sessionStatus
          properties:
            transactionId:
              $ref: "#/components/schemas/UuidSchema"
            sessionStatus:
              type: string
              enum:
                - REQUESTED
                - ACKNOWLEDGED
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    HIPHIRequest:
      type: object
      required:
        - requestId
        - timestamp
        - transactionId
        - hiRequest
      properties:
        requestId:
          $ref: "#/components/schemas/UuidSchema"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        transactionId:
          $ref: "#/components/schemas/UuidSchema"
        hiRequest:
          type: object
          required:
            - consent
            - dataPushUrl
            - keyMaterial
            - dateRange
          properties:
            consent:
              $ref: "#/components/schemas/consent"
            dateRange:
              $ref: "#/components/schemas/dateRange"
            dataPushUrl:
              type: string
            keyMaterial:
              $ref: "#/components/schemas/keyMaterial"
    ConsentRequestInitResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        consentRequest:
          type: object
          required:
            - id
          properties:
            id:
              type: string
              format: uuid
              description: id of the consent-request created
              example: f29f0e59-8388-4698-9fe6-05db67aeac46
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
      xml:
        name: ConsentRequestInitResponse
    RequestReference:
      type: object
      required:
        - requestId
      properties:
        requestId:
          type: string
          format: uuid
          description: the requestId that was passed
    ConsentFetchRequest:
      type: object
      required:
        - consentId
        - requestId
        - timestamp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        consentId:
          type: string
    ConsentRequestStatusRequest:
      type: object
      required:
        - consentRequestId
        - requestId
        - timestamp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        consentRequestId:
          type: string
    HIUConsentRequestStatus:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        consentRequest:
          type: object
          required:
            - id
            - status
          properties:
            id:
              type: string
              example: "<consent-request-id>"
            status:
              $ref: "#/components/schemas/ConsentStatus"
            consentArtefacts:
              type: array
              items:
                $ref: "#/components/schemas/ConsentArtefactReference"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    HIPHealthInformationRequestAcknowledgement:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        hiRequest:
          type: object
          required:
            - transactionId
            - sessionStatus
          properties:
            transactionId:
              type: string
              format: uuid
            sessionStatus:
              type: string
              enum:
                - ACKNOWLEDGED
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    HIPConsentNotificationResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          $ref: "#/components/schemas/ConsentAcknowledgement"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    HIUConsentNotificationResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          type: array
          items:
            $ref: "#/components/schemas/ConsentAcknowledgement"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    ConsentAcknowledgement:
      type: object
      required:
        - status
        - consentId
      properties:
        status:
          type: string
          enum:
            - OK
            - UNKNOWN
        consentId:
          type: string
          example: <consent-artefact-id>
    PatientIdentificationRequest:
      type: object
      required:
        - requestId
        - timestamp
        - query
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        query:
          type: object
          required:
            - patient
            - requester
          properties:
            patient:
              type: object
              properties:
                id:
                  type: string
                  example: hinapatel79@ndhm
            requester:
              type: object
              properties:
                type:
                  type: string
                  enum: [HIU, HIP]
                id:
                  type: string
                  example: 100005
    PatientIdentificationResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        patient:
          type: object
          required:
            - id
            - name
          properties:
            id:
              type: string
              example: hinapatel79@ndhm
            name:
              type: string
              example: Hina Patel
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
      xml:
        name: PatientIdentificationResponse

    PatientAuthPurpose:
      type: string
      enum: [LINK, KYC, KYC_AND_LINK]
      description: what is the purpose of user auth

    PatientAuthInitRequest:
      type: object
      required:
        - requestId
        - timestamp
        - query
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        query:
          type: object
          required:
            - id
            - requester
            - purpose
          properties:
            id:
              type: string
              example: "hinapatel@ndhm"
              description: id  of the patient understood by the CM
            purpose:
              $ref: "#/components/schemas/PatientAuthPurpose"
            authMode:
              $ref: "#/components/schemas/AuthenticationMode"
            requester:
              $ref: "#/components/schemas/PatientAuthRequester"

    PatientAuthInitResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        auth:
          type: object
          required:
            - transactionId
            - mode
          properties:
            transactionId:
              type: string
            mode:
              $ref: "#/components/schemas/AuthenticationMode"
            meta:
              $ref: "#/components/schemas/AuthMeta"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"

    AuthenticationMode:
      type: string
      enum: ["MOBILE_OTP", "DIRECT", "DEMOGRAPHICS", "AADHAAR_OTP"]
      description: >
        Subjected to CM specific capability
         1. MOBILE_OTP - for SMS OTP
         2. DIRECT - for authentication directly with the patient. e.g. Mobile App, SMS
         3. AADHAAR_OTP - for auth using OTP sent to Aadhaar number
         4. DEMOGRAPHICS - for auth using demographic verification.

    AuthMeta:
      type: object
      properties:
        hint:
          type: string
        expiry:
          type: string
          example: "2019-12-30T12:01:55Z"
      xml:
        name: Meta

    PatientAuthConfirmRequest:
      type: object
      required:
        - requestId
        - timestamp
        - transactionId
        - credential
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        transactionId:
          type: string
        credential:
          type: object
          description: note, demographic details are only required for demographic auth at this point.
          properties:
            authCode:
              type: string
            demographic:
              $ref: "#/components/schemas/PatientDemographic"

    PatientDemographic:
      type: object
      required:
        - name
        - gender
        - dateOfBirth
      description: Demographic details are only required for demographic auth at this point. Demographic details must be same as registered
      properties:
        name:
          type: string
          example: "janki das"
        gender:
          $ref: "#/components/schemas/PatientGender"
        dateOfBirth:
          type: string
          example: "1972-02-29"
          description: date of birth in YYYY-MM-DD format.
        identifier:
          $ref: "#/components/schemas/AuthConfirmIdentifier"
    AuthConfirmIdentifier:
      type: object
      required:
        - type
        - value
      properties:
        type:
          $ref: "#/components/schemas/AuthConfirmIdentifierType"
        value:
          type: string
          example: "+919800083232"
      xml:
        name: AuthConfirmIdentifier
    AuthConfirmIdentifierType:
      type: string
      enum: [MOBILE]
    PatientAuthConfirmResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        auth:
          type: object
          description: >
            depending on the purpose of auth, as specified in /auth/init, the response may include the following 
              1. LINK - only returns **accessToken**
              2. KYC - only returns **patient**
              3. KYC_AND_LINK - returns both **accessToken** and **patient**
          properties:
            accessToken:
              type: string
              description: access token for initialization of subsequent action.
            validity:
              $ref: "#/components/schemas/AccessTokenValidity"
            patient:
              $ref: "#/components/schemas/PatientDemographicResponse"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    ShareProfileResult:
      type: object
      required:
        - requestId
        - timestamp
        - acknowledgement
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          $ref: "#/components/schemas/ShareProfileAcknowledgement"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
      xml:
        name: ShareProfileResult
    ShareProfileResult1:
      type: object
      required:
        - requestId
        - timestamp
        - acknowledgement
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          $ref: "#/components/schemas/ShareProfileAcknowledgement1"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
      xml:
        name: ShareProfileResult
    ShareProfileAcknowledgement1:
      type: object
      required:
        - status
        - healthId
        - tokenNumber
      properties:
        status:
          type: string
          enum:
            - SUCCESS
            - FAILURE
        healthId:
          type: string
          example: <username>@<suffix>
        tokenNumber:
          type: string
    ShareProfileAcknowledgement:
      type: object
      required:
        - status
        - healthId
      properties:
        status:
          type: string
          enum:
            - SUCCESS
            - FAILURE
        healthId:
          type: string
          example: <username>@<suffix>

    PatientDemographicResponse:
      type: object
      required:
        - id
        - name
        - gender
        - yearOfBirth
      properties:
        id:
          type: string
          example: <patient-id>@<consent-manager-id>
          description: PHR Identifier of patient at consent manager
        name:
          type: string
          example: "Hina Patel"
        gender:
          $ref: "#/components/schemas/PatientGender"
        yearOfBirth:
          type: integer
          example: 2000
        address:
          $ref: "#/components/schemas/PatientAddress"
        identifiers:
          type: array
          items:
            $ref: "#/components/schemas/Identifier"
          xml:
            name: identifiers
            wrapped: true

    PatientAddress:
      type: object
      properties:
        line:
          type: string
        district:
          type: string
        state:
          type: string
        pincode:
          type: string

    PatientCareContextLinkRequest:
      type: object
      required:
        - requestId
        - timestamp
        - link
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        link:
          $ref: "#/components/schemas/PatientCareContextLink"
    PatientCareContextLink:
      type: object
      required:
        - accessToken
        - patient
      properties:
        accessToken:
          type: string
          description: AccessToken fetched in the user auth process for the purpose specified
        patient:
          type: object
          required:
            - referenceNumber
            - display
            - careContexts
          properties:
            referenceNumber:
              type: string
              example: TMH-PUID-001
              description: patient reference id at HIP
            display:
              type: string
            careContexts:
              type: array
              items:
                $ref: "#/components/schemas/CareContextRepresentation"
              xml:
                name: careContexts
                wrapped: true
    ShareProfileRequest:
      type: object
      required:
        - requestId
        - timestamp
        - profile
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request.
          example: "499a5a4a-7dda-4f20-9b67-e24589627061"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        profile:
          type: object
          required:
            - userDemographics
          properties:
            hipCode:
              type: string
              description: additional details about HIP retrieved after scanning QR.
              example: 12345 (CounterId)
            patient:
              type: object
              required:
                - healthId
                - healthIdNumber
                - gender
                - name
                - yearOfBirth
              properties:
                healthId:
                  type: string
                  example: <username>@<suffix>
                healthIdNumber:
                  type: string
                  example: 1111-1111-1111-11
                name:
                  type: string
                  example: "Jane Doe"
                gender:
                  $ref: "#/components/schemas/PatientGender"
                address:
                  $ref: "#/components/schemas/PatientAddress"
                yearOfBirth:
                  type: integer
                  example: 2000
                dayOfBirth:
                  type: integer
                monthOfBirth:
                  type: integer
                identifiers:
                  type: array
                  items:
                    $ref: "#/components/schemas/Identifier"
                  xml:
                    name: Identifiers
                    wrapped: true
      xml:
        name: ShareProfileRequest
    ShareProfileRequest1:
      type: object
      required:
        - requestId
        - timestamp
        - intent
        - location
        - profile
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request.
          example: "499a5a4a-7dda-4f20-9b67-e24589627061"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        intent:
          type: object
          required:
            - type
          properties:
            type:
              type: string
        location:
          $ref: "#/components/schemas/Location"
        profile:
          type: object
          required:
            - patient
          properties:
            hipCode:
              type: string
              description: additional details about HIP retrieved after scanning QR.
              example: 12345 (CounterId)
            patient:
              type: object
              required:
                - healthId
                - healthIdNumber
                - gender
                - name
                - yearOfBirth
              properties:
                healthId:
                  type: string
                  example: <username>@<suffix>
                healthIdNumber:
                  type: string
                  example: 1111-1111-1111-11
                name:
                  type: string
                  example: "Jane Doe"
                gender:
                  $ref: "#/components/schemas/PatientGender"
                address:
                  $ref: "#/components/schemas/PatientAddress"
                yearOfBirth:
                  type: integer
                  example: 2000
                dayOfBirth:
                  type: integer
                monthOfBirth:
                  type: integer
                identifiers:
                  type: array
                  items:
                    $ref: "#/components/schemas/Identifier"
                  xml:
                    name: Identifiers
                    wrapped: true
      xml:
        name: ShareProfileRequest
    Location:
      type: object
      required:
        - latitude
        - longitude
      properties:
        latitude:
          type: string
        longitude:
          type: string
    PatientCareContextLinkResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          type: object
          required:
            - status
          properties:
            status:
              type: string
              enum:
                - SUCCESS
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    PatientAuthModeQueryRequest:
      type: object
      required:
        - requestId
        - timestamp
        - query
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        query:
          type: object
          required:
            - id
            - purpose
            - requester
          properties:
            id:
              type: string
              example: hinapatel79@ndhm
            purpose:
              $ref: "#/components/schemas/PatientAuthPurpose"
            requester:
              type: object
              required:
                - id
                - type
              properties:
                type:
                  type: string
                  enum: [HIP, HIU]
                id:
                  type: string
                  example: "100005"

    PatientAuthModeQueryResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        auth:
          type: object
          required:
            - purpose
            - modes
          properties:
            purpose:
              $ref: "#/components/schemas/PatientAuthPurpose"
            modes:
              type: array
              items:
                $ref: "#/components/schemas/AuthenticationMode"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"

    PatientAuthNotification:
      type: object
      required:
        - requestId
        - timestamp
        - transactionId
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        auth:
          type: object
          description: >
            depending on the purpose of auth, as specified in /auth/init, the response may include the following 
              1. LINK - only returns **accessToken**
              2. KYC - only returns **patient**
              3. KYC_AND_LINK - returns both **accessToken** and **patient**
          required:
            - transactionId
            - status
          properties:
            transactionId:
              type: string
              description: transaction id for auth session
            status:
              type: string
              enum: ["GRANTED", "DENIED"]
            accessToken:
              type: string
              description: access token for initialization of subsequent action.
            validity:
              $ref: "#/components/schemas/AccessTokenValidity"
            patient:
              $ref: "#/components/schemas/PatientDemographicResponse"

    CareContextDefinition:
      type: object
      required:
        - patientReference
        - careContextReference
      properties:
        patientReference:
          type: string
          description: A patient identifier with which patient is registered in the facility/hospital
          example: batman@tmh
        careContextReference:
          type: string
          description: An identifier of patient's care context created in HIP. A care context is a group of patient's health data (Not the actual health data)
          example: Episode1

    AccessTokenValidity:
      type: object
      required:
        - purpose
        - requester
        - expiry
        - limit
      properties:
        purpose:
          $ref: "#/components/schemas/PatientAuthPurpose"
        requester:
          $ref: "#/components/schemas/PatientAuthRequester"
        expiry:
          $ref: "#/components/schemas/TimestampSchema"
        limit:
          type: integer
          example: "1"
          description: number of times, the token can be used

    PatientAuthRequester:
      type: object
      required:
        - type
        - id
      description: identification of requester
      properties:
        type:
          type: string
          enum: [HIP, HIU]
        id:
          type: string
          example: 100005

    PatientAuthNotificationAcknowledgement:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          type: object
          required:
            - status
          properties:
            status:
              type: string
              enum: ["OK"]
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"

    ServiceProfileResponse:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        type:
          $ref: "#/components/schemas/ServiceRole"
        endpoints:
          type: array
          items:
            $ref: "#/components/schemas/Endpoint"
        active:
          type: boolean
      xml:
        name: ServiceProfileResponse
    Endpoint:
      type: object
      properties:
        use:
          type: string
        connectionType:
          type: string
        address:
          type: string
    ServiceRole:
      type: string
      enum: [HIP, HIU, HIP_AND_HIU, HEALTH_LOCKER]

    SubscriptionPeriod:
      type: object
      required:
        - from
        - to
      properties:
        from:
          type: string
          format: date-time
        to:
          type: string
          format: date-time

    SubscriptionCategory:
      type: string
      enum: ["LINK", "DATA"]

    SubscriptionRequest:
      type: object
      required:
        - requestId
        - timestamp
        - subscription
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request.
          example: "499a5a4a-7dda-4f20-9b67-e24589627061"
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        subscription:
          type: object
          required:
            - purpose
            - patient
            - hiu
            - categories
            - period
          properties:
            purpose:
              $ref: "#/components/schemas/UsePurpose"
            patient:
              $ref: "#/components/schemas/ConsentManagerPatientID"
            hiu:
              $ref: "#/components/schemas/OrganizationRepresentation"
            hips:
              type: array
              items:
                $ref: "#/components/schemas/OrganizationRepresentation"
            categories:
              type: array
              items:
                $ref: "#/components/schemas/SubscriptionCategory"
            period:
              $ref: "#/components/schemas/SubscriptionPeriod"

    HIUSubscriptionRequestReceipt:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        subscriptionRequest:
          type: object
          required:
            - id
          properties:
            id:
              type: string
              format: uuid
              description: id of the consent-request created
              example: f29f0e59-8388-4698-9fe6-05db67aeac46
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
      xml:
        name: ConsentRequestInitResponse

    SubscriptionStatus:
      type: string
      enum: ["GRANTED", "DENIED"]

    HIUSubscriptionContext:
      type: object
      required:
        - categories
        - period
      properties:
        hip:
          $ref: "#/components/schemas/OrganizationRepresentation"
        categories:
          type: array
          items:
            $ref: "#/components/schemas/SubscriptionCategory"
        period:
          $ref: "#/components/schemas/SubscriptionPeriod"

    HIUSubscription:
      type: object
      required:
        - id
        - patient
        - hiu
        - sources
      properties:
        id:
          type: string
          example: "subscription Id"
        patient:
          $ref: "#/components/schemas/ConsentManagerPatientID"
        hiu:
          $ref: "#/components/schemas/OrganizationRepresentation"
        sources:
          type: array
          items:
            $ref: "#/components/schemas/HIUSubscriptionContext"

    SubscriptionApprovalNotification:
      type: object
      required:
        - requestId
        - timestamp
        - notification
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        notification:
          type: object
          required:
            - status
          properties:
            subscriptionRequestId:
              type: string
              example: "request id of the subscription"
            status:
              $ref: "#/components/schemas/SubscriptionStatus"
            subscription:
              $ref: "#/components/schemas/HIUSubscription"

    HIUSubscriptionRequestNotificationAcknowledgement:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          type: object
          required:
            - status
            - subscriptionRequestId
          properties:
            status:
              type: string
              enum: ["OK"]
            subscriptionRequestId:
              type: string
              example: "subscription Id"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"

    EventCategoryDetail:
      type: object
      required:
        - hiTypes
        - careContext
      properties:
        careContext:
          $ref: "#/components/schemas/CareContextDefinition"
        hiTypes:
          type: array
          items:
            $ref: "#/components/schemas/HITypeEnum"

    HIUSubscriptionEventContent:
      type: object
      required:
        - patient
        - hip
        - context
      properties:
        patient:
          $ref: "#/components/schemas/ConsentManagerPatientID"
        hip:
          $ref: "#/components/schemas/OrganizationRepresentation"
        context:
          type: array
          items:
            $ref: "#/components/schemas/EventCategoryDetail"

    HIUSubscriptionNotification:
      type: object
      required:
        - requestId
        - timestamp
        - event
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        event:
          type: object
          required:
            - id
            - published
            - subscriptionId
            - category
            - content
          properties:
            id:
              $ref: "#/components/schemas/UuidSchema"
            published:
              $ref: "#/components/schemas/TimestampSchema"
            subscriptionId:
              type: string
              example: "subscription Id"
            category:
              $ref: "#/components/schemas/SubscriptionCategory"
            content:
              $ref: "#/components/schemas/HIUSubscriptionEventContent"

    PatientSMSNotifcationRequest:
      type: object
      required:
        - requestId
        - timestamp
        - notification
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        notification:
          type: object
          required:
            - phoneNo
            - hip
            - careContextInfo
          properties:
            phoneNo:
              type: string
              description: Phone number of the receiver with country code
              example: +91-9999999999
            receiverName:
              type: string
              description: Name of the reciever/patient. Receiver's name will not be sent if not provided.
              example: Ramesh Singh (Optional)
            careContextInfo:
              type: string
              description: Information about care context or visit for which the SMS is being sent.
              example: X-Ray on 22nd Dec
            deeplinkUrl:
              type: string
              format: uri
              description: A link pointing to digital health records of the patient. ABHA Mobile Application's deeplink will be sent in SMS if this field is not provided.
              example: https://link.to.health.records/ (Optional)
            hip:
              type: object
              required:
                - id
              properties:
                name:
                  type: string
                  description: Name of the HIP(Hospital). Hospital's name will be fetched from registry if not provided.
                  example: Max Healthcare (Optional)
                id:
                  type: string
                  description: Registered id of the HIP.
                  example: HIP_001
    PatientSMSNotifcationResponse:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        status:
          type: string
          enum: [ACKNOWLEDGED, ERRORED]
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"

    HIUSubscriptionNotificationAcknowledgment:
      type: object
      required:
        - requestId
        - timestamp
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          type: object
          required:
            - status
            - eventId
          properties:
            status:
              type: string
              enum: ["OK"]
            eventId:
              type: string
              example: "subscription event Id"
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    HipDataNotificationRequest:
      type: object
      required:
        - requestId
        - timestamp
        - notification
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        notification:
          type: object
          required:
            - patient
            - careContext
            - hiTypes
            - date
            - hip
          properties:
            patient:
              type: object
              required:
                - id
              properties:
                id:
                  type: string
                  example: hinapatel@ncg
                  description: A patient identifier, abdm id or abdm number
            careContext:
              $ref: "#/components/schemas/CareContextDefinition"
            hiTypes:
              type: array
              description: Type of health data that created in the care context
              items:
                $ref: "#/components/schemas/HITypeEnum"
            date:
              $ref: "#/components/schemas/TimestampSchema"
            hip:
              type: object
              required:
                - id
              properties:
                id:
                  type: string
                  example: 1000010
    HipDataNotificationAcknowledgement:
      type: object
      required:
        - requestId
        - timestamp
        - acknowledgement
        - resp
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgement:
          type: object
          required:
            - status
          properties:
            status:
              type: string
              enum: ["SUCCESS"]
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"
    GatewayPatientStatusNotification:
      type: object
      required:
        - requestId
        - timestamp
        - acknowledgment
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        acknowledgment:
          type: object
          required:
            - status
          properties:
            status:
              type: string
              enum: ["OK"]
        error:
          $ref: "#/components/schemas/Error"
        resp:
          $ref: "#/components/schemas/RequestReference"

    PatientStatusNotification:
      type: object
      required:
        - requestId
        - timestamp
        - notification
      properties:
        requestId:
          type: string
          format: uuid
          description: a nonce, unique for each HTTP request
          example: 5f7a535d-a3fd-416b-b069-c97d021fbacd
        timestamp:
          $ref: "#/components/schemas/TimestampSchema"
        notification:
          type: object
          required:
            - patient
            - status
          properties:
            status:
              type: string
              enum: [DEACTIVATED, REACTIVATED, DELETED]
            patient:
              type: object
              required:
                - id
              properties:
                id:
                  type: string
                  example: hina@ncg